libdecor-0.2.5-2.fc44
List of Findings
Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
libdecor-0.2.5/src/libdecor-fallback.c:185:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘calloc(1, 16)’
libdecor-0.2.5/src/libdecor-fallback.c:179:1: enter_function: entry to ‘libdecor_fallback_plugin_new’
libdecor-0.2.5/src/libdecor-fallback.c:183:18: call_function: inlined call to ‘zalloc’ from ‘libdecor_fallback_plugin_new’
libdecor-0.2.5/src/libdecor-fallback.c:185:9: danger: ‘calloc(1, 16)’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
libdecor-0.2.5/src/libdecor.c:218:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘calloc(1, 12)’
libdecor-0.2.5/src/libdecor.c:758:1: enter_function: entry to ‘notify_on_capability_change’
libdecor-0.2.5/src/libdecor.c:764:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/libdecor.c:767:13: branch_false: ...to here
libdecor-0.2.5/src/libdecor.c:767:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/libdecor.c:768:13: branch_false: ...to here
libdecor-0.2.5/src/libdecor.c:767:13: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/libdecor.c:771:9: branch_false: ...to here
libdecor-0.2.5/src/libdecor.c:773:12: branch_true: following ‘true’ branch...
libdecor-0.2.5/src/libdecor.c:784:53: branch_true: ...to here
libdecor-0.2.5/src/libdecor.c:787:17: call_function: calling ‘libdecor_state_new’ from ‘notify_on_capability_change’
Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
libdecor-0.2.5/src/libdecor.c:366:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘configuration’
libdecor-0.2.5/src/libdecor.c:352:1: enter_function: entry to ‘xdg_surface_configure’
libdecor-0.2.5/src/libdecor.c:363:12: branch_true: following ‘true’ branch (when ‘configuration’ is NULL)...
libdecor-0.2.5/src/libdecor.c:364:33: call_function: inlined call to ‘libdecor_configuration_new’ from ‘xdg_surface_configure’
libdecor-0.2.5/src/libdecor.c:366:9: danger: ‘configuration’ could be NULL: unchecked value from [(6)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/5)
Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
libdecor-0.2.5/src/libdecor.c:438:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*((struct libdecor_frame)*(void *)user_data).priv.pending_configuration’
libdecor-0.2.5/src/libdecor.c:424:1: enter_function: entry to ‘xdg_toplevel_configure’
libdecor-0.2.5/src/libdecor.c:436:45: call_function: inlined call to ‘libdecor_configuration_new’ from ‘xdg_toplevel_configure’
libdecor-0.2.5/src/libdecor.c:438:9: danger: ‘calloc(1, 24)’ could be NULL: unchecked value from [(4)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/3)
Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
libdecor-0.2.5/src/libdecor.c:443:9: warning[-Wanalyzer-malloc-leak]: leak of ‘*((struct libdecor_frame)*(void *)user_data).priv.pending_configuration’
libdecor-0.2.5/src/libdecor.c:424:1: enter_function: entry to ‘xdg_toplevel_configure’
libdecor-0.2.5/src/libdecor.c:436:45: call_function: inlined call to ‘libdecor_configuration_new’ from ‘xdg_toplevel_configure’
libdecor-0.2.5/src/libdecor.c:443:9: danger: ‘*((struct libdecor_frame)*(void *)user_data).priv.pending_configuration’ leaks here; was allocated at [(4)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/3)
Error: GCC_ANALYZER_WARNING (CWE-476): [#def6]
libdecor-0.2.5/src/libdecor.c:583:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘calloc(1, 168)’
libdecor-0.2.5/src/libdecor.c:564:1: enter_function: entry to ‘libdecor_decorate’
libdecor-0.2.5/src/libdecor.c:573:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/libdecor.c:576:17: branch_false: ...to here
libdecor-0.2.5/src/libdecor.c:577:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/libdecor.c:580:22: call_function: inlined call to ‘zalloc’ from ‘libdecor_decorate’
libdecor-0.2.5/src/libdecor.c:583:9: danger: ‘calloc(1, 168)’ could be NULL: unchecked value from [(7)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/6)
Error: COMPILER_WARNING (CWE-704): [#def7]
libdecor-0.2.5/src/libdecor.c: scope_hint: In function ‘load_plugin_loader’
libdecor-0.2.5/src/libdecor.c:1479:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
Error: COMPILER_WARNING (CWE-704): [#def8]
libdecor-0.2.5/src/libdecor.c:1479:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
Error: GCC_ANALYZER_WARNING (CWE-476): [#def9]
libdecor-0.2.5/src/libdecor.c:1533:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘calloc(1, 48)’
libdecor-0.2.5/src/libdecor.c:1468:1: enter_function: entry to ‘load_plugin_loader’
libdecor-0.2.5/src/libdecor.c:1480:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/libdecor.c:1483:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/libdecor.c:1486:15: branch_false: ...to here
libdecor-0.2.5/src/libdecor.c:1488:12: branch_false: following ‘false’ branch (when ‘lib’ is non-NULL)...
libdecor-0.2.5/src/libdecor.c:1493:30: branch_false: ...to here
libdecor-0.2.5/src/libdecor.c:1494:12: branch_false: following ‘false’ branch (when ‘plugin_description’ is non-NULL)...
libdecor-0.2.5/src/libdecor.c:1502:13: branch_false: ...to here
libdecor-0.2.5/src/libdecor.c:1502:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/libdecor.c:1513:15: branch_false: ...to here
libdecor-0.2.5/src/libdecor.c:1513:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/libdecor.c:1518:14: branch_false: ...to here
libdecor-0.2.5/src/libdecor.c:1518:12: branch_true: following ‘true’ branch...
libdecor-0.2.5/src/libdecor.c:1523:20: branch_true: ...to here
libdecor-0.2.5/src/libdecor.c:1524:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/libdecor.c:1532:25: call_function: inlined call to ‘zalloc’ from ‘load_plugin_loader’
libdecor-0.2.5/src/libdecor.c:1533:9: danger: ‘calloc(1, 48)’ could be NULL: unchecked value from [(19)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/18)
Error: GCC_ANALYZER_WARNING (CWE-476): [#def10]
libdecor-0.2.5/src/libdecor.c:1725:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘calloc(1, 96)’
libdecor-0.2.5/src/libdecor.c:1718:1: enter_function: entry to ‘libdecor_new’
libdecor-0.2.5/src/libdecor.c:1723:19: call_function: inlined call to ‘zalloc’ from ‘libdecor_new’
libdecor-0.2.5/src/libdecor.c:1725:9: danger: ‘calloc(1, 96)’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/2)
Error: GCC_ANALYZER_WARNING (CWE-476): [#def11]
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:1566:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘border_component’
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2313:1: enter_function: entry to ‘pointer_button’
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2327:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2330:13: branch_false: ...to here
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2330:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2335:14: branch_false: ...to here
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2335:12: branch_false: following ‘false’ branch...
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2338:12: branch_false: ...to here
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2338:12: branch_true: following ‘true’ branch (when ‘button == 272’)...
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2339:20: branch_true: ...to here
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2339:20: branch_false: following ‘false’ branch (when ‘state != 1’)...
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2382:25: branch_false: ...to here
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2382:25: branch_true: following ‘true’ branch (when ‘state == 0’)...
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2383:26: branch_true: ...to here
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2382:26: branch_true: following ‘true’ branch...
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2384:25: branch_true: ...to here
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2403:25: release_memory: using NULL here
libdecor-0.2.5/src/plugins/cairo/libdecor-cairo.c:2404:25: call_function: calling ‘sync_active_component’ from ‘pointer_button’
Error: GCC_ANALYZER_WARNING (CWE-476): [#def12]
libdecor-0.2.5/src/plugins/dummy/libdecor-dummy.c:115:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘calloc(1, 16)’
libdecor-0.2.5/src/plugins/dummy/libdecor-dummy.c:109:1: enter_function: entry to ‘libdecor_plugin_new’
libdecor-0.2.5/src/plugins/dummy/libdecor-dummy.c:113:24: call_function: inlined call to ‘zalloc’ from ‘libdecor_plugin_new’
libdecor-0.2.5/src/plugins/dummy/libdecor-dummy.c:115:9: danger: ‘calloc(1, 16)’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
Error: CPPCHECK_WARNING (CWE-457): [#def13]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:411: error[uninitvar]: Uninitialized variable: seat->wl_pointer
Error: CPPCHECK_WARNING (CWE-457): [#def14]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:423: error[uninitvar]: Uninitialized variable: cursor_output.output
Error: GCC_ANALYZER_WARNING (CWE-476): [#def15]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:618:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘calloc(1, 56)’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2113:1: enter_function: entry to ‘pointer_leave’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2130:12: branch_true: following ‘true’ branch...
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2131:17: branch_true: ...to here
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2134:17: call_function: calling ‘draw_decoration’ from ‘pointer_leave’
Error: CPPCHECK_WARNING (CWE-457): [#def16]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:667: error[uninitvar]: Uninitialized variable: surface_output.output
Error: CPPCHECK_WARNING (CWE-457): [#def17]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:741: error[uninitvar]: Uninitialized variable: surface_output->output
Error: CPPCHECK_WARNING (CWE-457): [#def18]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:804: error[uninitvar]: Uninitialized variable: surface_output->output
Error: GCC_ANALYZER_WARNING (CWE-401): [#def19]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:990:9: warning[-Wanalyzer-malloc-leak]: leak of ‘buttons’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2113:1: enter_function: entry to ‘pointer_leave’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2130:12: branch_true: following ‘true’ branch...
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2131:17: branch_true: ...to here
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2134:17: call_function: calling ‘draw_decoration’ from ‘pointer_leave’
Error: GCC_ANALYZER_WARNING (CWE-476): [#def20]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:991:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2113:1: enter_function: entry to ‘pointer_leave’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2130:12: branch_true: following ‘true’ branch...
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2131:17: branch_true: ...to here
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2134:17: call_function: calling ‘draw_decoration’ from ‘pointer_leave’
Error: GCC_ANALYZER_WARNING (CWE-476): [#def21]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1221:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘buffer’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2113:1: enter_function: entry to ‘pointer_leave’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2130:12: branch_true: following ‘true’ branch...
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2131:17: branch_true: ...to here
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2134:17: call_function: calling ‘draw_decoration’ from ‘pointer_leave’
Error: CPPCHECK_WARNING (CWE-457): [#def22]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1686: error[uninitvar]: Uninitialized variable: seat->name
Error: CPPCHECK_WARNING (CWE-457): [#def23]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1712: error[uninitvar]: Uninitialized variable: seat->name
Error: GCC_ANALYZER_WARNING (CWE-476): [#def24]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1884:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘calloc(1, 24)’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1875:1: enter_function: entry to ‘cursor_surface_enter’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1883:33: call_function: inlined call to ‘zalloc’ from ‘cursor_surface_enter’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1884:17: danger: ‘calloc(1, 24)’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/2)
Error: GCC_ANALYZER_WARNING (CWE-401): [#def25]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1885:17: warning[-Wanalyzer-malloc-leak]: leak of ‘calloc(1, 24)’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1875:1: enter_function: entry to ‘cursor_surface_enter’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1883:33: call_function: inlined call to ‘zalloc’ from ‘cursor_surface_enter’
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1885:17: danger: ‘calloc(1, 24)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/2)
Error: CPPCHECK_WARNING (CWE-457): [#def26]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1901: error[uninitvar]: Uninitialized variable: cursor_output->output
Error: CPPCHECK_WARNING (CWE-457): [#def27]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:1939: error[uninitvar]: Uninitialized variable: cursor_output->output
Error: CPPCHECK_WARNING (CWE-457): [#def28]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2619: error[uninitvar]: Uninitialized variables: frame_gtk.frame, frame_gtk.plugin_gtk, frame_gtk.content_width, frame_gtk.content_height, frame_gtk.window_state, frame_gtk.decoration_type, frame_gtk.title, frame_gtk.capabilities, frame_gtk.active, frame_gtk.touch_active, frame_gtk.focus, frame_gtk.grab, frame_gtk.shadow_showing, frame_gtk.shadow, frame_gtk.window, frame_gtk.header, frame_gtk.headerbar, frame_gtk.hdr_focus, frame_gtk.shadow_blur, frame_gtk.link
Error: CPPCHECK_WARNING (CWE-457): [#def29]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2624: error[uninitvar]: Uninitialized variables: seat.plugin_gtk, seat.name, seat.wl_seat, seat.wl_pointer, seat.wl_touch, seat.cursor_surface, seat.current_cursor, seat.cursor_scale, seat.cursor_outputs, seat.cursor_theme, seat.cursor_left_ptr, seat.pointer_focus, seat.touch_focus, seat.pointer_x, seat.pointer_y, seat.pointer_button_time_stamp, seat.touch_down_time_stamp, seat.serial, seat.grabbed, seat.link
Error: CPPCHECK_WARNING (CWE-457): [#def30]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2701: error[uninitvar]: Uninitialized variable: surface_output->output
Error: CPPCHECK_WARNING (CWE-457): [#def31]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2722: error[uninitvar]: Uninitialized variable: cursor_output->output
Error: CPPCHECK_WARNING (CWE-457): [#def32]
libdecor-0.2.5/src/plugins/gtk/libdecor-gtk.c:2743: error[uninitvar]: Uninitialized variable: output->id
Scan Properties
| analyzer-version-clippy | 1.97.1 |
| analyzer-version-cppcheck | 2.21.1 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-18.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | libdecor-0.2.5-2.fc44 |
| store-results-to | /tmp/tmpr46jhrda/libdecor-0.2.5-2.fc44.tar.xz |
| time-created | 2026-08-03 17:05:11 |
| time-finished | 2026-08-03 17:07:19 |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpr46jhrda/libdecor-0.2.5-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpr46jhrda/libdecor-0.2.5-2.fc44.src.rpm' |
| tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9 |